agent-boxA private, sandboxed Claude Code or Codex agent for you and your team — launch it in your own AWS or Azure account with one click.
agent-boxA private, sandboxed Claude Code or Codex agent for you and your team — launch it in your own AWS or Azure account with one click.
A ready-to-use coding agent you open right in your browser. Set it up once with a single click; it keeps running on its own.
Each agent runs in its own restricted account and can't touch the rest of the machine — it only gets the specific extra powers you choose to grant. The agent's own approval prompts are off by default: the sandbox, not the agent, is the containment. Read the security model →
A full terminal, right in your browser over a secure connection. Open your link and you're in — nothing to install.
Pick Claude Code or Codex when you launch. The same NixOS module, terminal, and sandboxing model support both.
API keys and tokens live in a root-only file on your box — out of shared settings, never baked into saved images. The agent can use whatever you hand it, so grant tokens scoped to what it should do.
On AWS it's a single flat Lightsail bundle — $12/month for the default 2 GiB box, $24/month for 4 GiB, with the SSD, a stable IPv4 address and a multi-TB transfer allowance all included. On Azure a default 4 GiB box is ~$30/month. Either way the address is stable, so the box just works from any network and never gets reclaimed mid-session. Delete the stack or the resource group anytime to stop charges.
Sets up one ready-to-go box in your own AWS account — a flat-rate Lightsail instance with the browser terminal already running. It creates everything it needs, so there's nothing to configure beforehand — just pick a region and go.
WebPassword — that's what you'll use to log into the browser terminal. AWS masks it with dots after you type it and never shows it again, so save it somewhere before you launch. Choose Claude Code or Codex, pick a bundle size, and launch. The box takes a few minutes to set itself up, and the stack turns green only after it reports a successful first boot — so a green stack always has a working URL. Your browser link appears under Outputs in the AWS console — open it, enter the password, finish the selected agent's one-time sign-in, and you're in. (Claude Code stacks can drive the box from the Claude desktop / mobile app via Remote Control after the first browser login — the session name is <UserName>-main@<host>.sslip.io, the box's own public address — so the entry in the Claude apps doubles as the address you reach it at.)
small_3_0 (2 vCPU / 2 GiB / 60 GiB SSD) is $12/month; pick medium_3_0 (4 GiB, $24/month) for parallel sessions or heavy builds. Every bundle is dual-stack, IPv4 and IPv6, so the box is reachable from any network. Delete the stack to stop billing. If you'd rather have EC2 — arbitrary instance types, Spot pricing, an IPv6-only box with no IPv4 charge, a root volume that grows in place — the EC2 template is still published.
The same box on a single Azure Linux VM, from a Bicep template. The deployment brings its own network and static address, so nothing on the subscription has to be set up beforehand — you pick the resource group and region on the form.
webPassword — that's the one you'll use to log into the browser terminal, and Azure never shows it again, so save it before you deploy. Then paste an SSH public key into adminPasswordOrKey: that's a separate debug account (SSH stays closed at the firewall by default), and Azure refuses to create a Linux VM without one. Choose Claude Code or Codex, pick a size, deploy. The deployment reports success only once the box has finished configuring itself, so there's no green-but-dead state; open the webUrl output, sign in as the userName (default agent) with your webPassword, finish the selected agent's one-time sign-in, and you're in. (Claude Code boxes can then be driven from the Claude desktop / mobile app via Remote Control, under the session name in the remoteControlSession output.)
Standard_B2pls_v2 (2 vCPU / 4 GiB, ARM Ampere) plus a 64 GiB SSD plus the static IPv4 comes to ~$30/month in westus3, the cheapest region for Ampere — against $24/month flat for the same shape on Lightsail. Unlike a bundle, the disk can be grown later. Delete the resource group to stop billing. The one difference in behavior: the AWS templates are republished on every commit with that commit baked in, so a 1-click AWS box is pinned, while this button serves the committed template straight from GitHub and tracks the latest commit on master — set agentBoxFlakeRef to github:defangdevs/agent-box/<sha> on the form to pin a box. Azure boxes are IPv4-only.
If your team already has its own server, or prefers a downloadable virtual-machine image, the same setup is available for your IT team to install.
Setup instructions live in the project repository.